Privacy policy

How account details, uploaded photos, generated videos, cookies, and payment records are handled.

Last updated: 2026-10-16

Service status

This policy describes how Tormenta de Arena IA handles account details, uploaded photos, generated videos, cookies, and payment records.

Information we process

We process account identifiers, email and login details; uploaded photos; generation requests, task status and generated videos; payment and video credit records; support messages; and technical information needed for security and diagnostics. When payments are available, Stripe processes card details; we do not store full card numbers.

When you create an account, we record your registration IP address and, when available, the approximate country, region and city estimated from that IP by Cloudflare. This estimate may be inaccurate, particularly when a VPN or proxy is used. We also record a source label for your first visit, such as a search engine, referring website domain or campaign label. We do not store the full referring URL in this account field. This visit source is separate from your sign-in provider.

Purpose and providers

We use this information to authenticate you, process your photos, deliver videos to My videos, apply purchased video credits, return credits for failed tasks, investigate problems, handle support and rights complaints, and prevent abuse.

The service uses Cloudflare for hosting, database and file storage; KIE and the underlying AI provider for generation; Stripe for payments; and Google or GitHub for sign-in when enabled. Photos and task inputs must be sent to the generation provider to produce a video. Providers may process data outside your country under their own terms. We do not sell your personal information or use uploads in public marketing without separate permission.

Photos, access, and retention

Upload only photos you have the rights and consent to use. Each person pictured must be you or an adult who has consented. Do not upload photos of public figures or minors, confidential documents, or sensitive personal information.

Your browser may check whether a photo shows a recognizable subject before upload. This check runs on your device; the photo is not sent to a recognition service for that check. Your browser downloads detection software and a model from jsDelivr and Google Cloud Storage; these hosts receive the network information needed to serve those requests. Detection can be unavailable, so it is not a guarantee that every upload has been checked.

We do not list your uploads or outputs in a public showcase without separate permission. Generated video access normally requires signing in as the task owner; authorized administrators may access files for service administration. Uploaded photos may also be accessed through temporary signed links, including links supplied to the generation provider. Keep these links private while they are valid.

Permanent storage is not promised. Download videos you want to keep and check any expiry information shown in My videos. This notice does not promise a fixed automatic deletion period for photos or videos. You may request deletion by emailing support. Account, transaction, security and complaint records may be retained as needed for operations, disputes and legal obligations. Backups and third-party provider records may take additional time to expire; we do not promise immediate or complete deletion from third-party systems.

Cookies and choices

Essential cookies support sign-in and security. The tormenta_locale_choice cookie remembers an explicit language choice or dismissal of the language suggestion for one year. Your browser language alone does not redirect you.

The first-party first_touch cookie stores a signed source label for one year so we can associate a first visit with an account if you register. The traffic_visitor cookie identifies a browser for first-party visit and interaction measurement and lasts one year. These cookies do not contain uploaded photos, videos or payment details. Browser session storage also keeps photo draft references, pending visit and interaction events, and sign-in or checkout state to help you continue a request.

If optional analytics are enabled, Google Analytics measures visits, traffic sources and upload performance, Microsoft Clarity measures page interactions, and Plausible measures site usage. Upload performance events include file sizes, compression status, the local subject-check result and processing times; the event does not include the photo itself. If a Crisp or Tawk support chat is enabled, that provider may process your messages and browser information to deliver support. These services process data under their own privacy terms; this notice does not mean all of them are active. You can remove or block cookies through your browser settings. Blocking essential cookies can prevent sign-in and other features from working.

Privacy requests

Depending on applicable law, you may request access, correction, export or deletion of your information, or object to certain processing, by emailing support@tormentadearenaia.com. We may verify your identity. Mandatory financial or security records may need to be retained. Do not send passwords, verification codes or full card numbers.

Age, security, and contact

This service is for people aged 18 and over. Report an unauthorized upload or an underage user's data to support. We use reasonable safeguards but cannot guarantee absolute security. Contact support@tormentadearenaia.com for privacy requests and see DMCA / Takedown for content complaints.